$ rpki-client -vvf rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft File: 2m6UHNv-AaruCRs_lVldbUAYMW0.mft (raw, json) Hash identifier: JMxbQ6aAftGuz1ec6G/Q0qd+qITO7ZkniRE4TgdX7rQ= Subject key identifier: 0D:A9:3F:6C:E2:F0:F9:73:C6:72:5D:4E:21:DC:8E:F9:42:45:F2:E3 Authority key identifier: DA:6E:94:1C:DB:FE:01:AA:EE:09:1B:3F:95:59:5D:6D:40:18:31:6D Certificate issuer: /CN=A9122EBD/serialNumber=DA6E941CDBFE01AAEE091B3F95595D6D4018316D Certificate serial: 061F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft Manifest number: 0619 Signing time: Sun 19 Oct 2025 00:24:52 +0000 Manifest this update: Sun 19 Oct 2025 00:24:51 +0000 Manifest next update: Sun 26 Oct 2025 00:24:51 +0000 Files and hashes: 1: 2m6UHNv-AaruCRs_lVldbUAYMW0.crl (hash: kXXr63OG7oLAFjYk7xJw9t+M4OntBbMU8oDWLPSqzko=) 2: 1576F19ABC5C11EB831EC25AC4F9AE02.roa (hash: JTt1lcwJJ/VlJRR1mPyJ+td5e5c2alDgtGmRBoxCA5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.crl rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1567 (0x61f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122EBD, serialNumber=DA6E941CDBFE01AAEE091B3F95595D6D4018316D Validity Not Before: Oct 19 00:24:51 2025 GMT Not After : Oct 26 00:24:51 2025 GMT Subject: CN=68f42fd3-1b0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:29:2e:31:fe:17:45:a4:f0:8e:5c:52:db:95: 97:73:65:fe:bf:af:e8:32:75:4c:47:eb:b2:b6:4f: 8d:28:a9:12:0f:21:b2:81:fa:40:5c:5e:c4:cf:5c: f3:18:91:dd:61:e8:ef:c4:46:66:ad:a3:59:02:25: 9c:b1:04:39:b2:d9:c2:a0:6c:8d:97:3a:87:43:e7: 61:78:6f:56:4f:65:ea:e1:f3:77:7c:39:7e:72:5c: 33:b9:0e:82:c6:89:39:12:c1:80:a7:cc:11:46:5a: a4:86:06:56:fe:3a:d6:b8:62:52:ee:92:30:cf:f7: 06:94:4e:36:b7:6d:a1:49:0f:80:d8:1d:50:81:2b: 16:8f:2b:04:0c:9f:59:58:3c:ac:a4:6f:ad:d9:30: 27:50:c1:5f:c2:aa:52:18:52:73:94:ec:e2:30:44: 0a:03:86:fc:bb:06:30:91:f5:e4:a2:51:63:6a:df: c7:cd:ed:90:fa:05:46:e3:64:b9:08:fc:95:5c:82: bd:9a:b6:ec:aa:7c:c1:bf:4d:59:6f:3e:5d:19:23: bb:83:7a:de:0f:b1:cd:e0:ae:9c:f5:fc:4e:87:98: 61:82:b7:fe:2e:62:b1:7e:9c:b5:2f:3e:c5:72:0d: e5:b5:cc:d0:7d:2d:2b:9b:37:17:9b:be:d2:5c:87: c6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A9:3F:6C:E2:F0:F9:73:C6:72:5D:4E:21:DC:8E:F9:42:45:F2:E3 X509v3 Authority Key Identifier: keyid:DA:6E:94:1C:DB:FE:01:AA:EE:09:1B:3F:95:59:5D:6D:40:18:31:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:32:03:c7:85:6f:2d:dd:96:c7:4a:3e:48:50:9a:8d:e1:fb: 3e:d8:f6:2f:01:46:06:c8:7d:90:5a:4c:c8:b2:fd:4b:42:f1: 0c:c5:27:5f:f6:02:e7:c0:54:08:d8:cc:10:06:30:af:62:46: 94:c3:81:ec:28:b2:05:85:43:72:fa:5c:c0:c0:c4:9a:c5:cf: 11:e6:3e:cc:a4:44:81:28:17:f9:56:97:db:b9:26:4f:e8:db: bd:0f:cc:06:f5:ec:e2:60:83:2a:9d:5b:d2:65:c6:79:57:5b: e7:55:eb:aa:16:4f:4c:50:96:83:a0:08:4b:85:71:81:51:b0: 24:dc:f0:76:14:8f:13:47:b7:d5:b3:7e:4f:97:3d:b6:e8:f4: 07:49:6f:4d:81:74:34:31:aa:28:03:b9:f0:eb:81:10:0f:d6: cf:bf:f5:26:98:6f:5c:8d:d8:00:52:00:18:30:6b:ab:d5:13: 99:24:5f:43:e5:f9:bf:c1:85:b8:94:48:ec:52:c3:c9:81:25: 5d:d9:95:ae:c6:e6:90:2c:3b:a7:3d:48:5e:ed:30:56:49:e0: 41:96:94:70:47:a0:31:95:1e:47:9a:f8:a2:30:7c:4b:2c:3c: cb:20:68:2d:61:06:d6:ff:48:00:80:36:f1:99:6a:0a:4d:28: ad:e0:da:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFQkQxMTAvBgNVBAUTKERBNkU5NDFDREJGRTAxQUFFRTA5MUIzRjk1NTk1RDZE NDAxODMxNkQwHhcNMjUxMDE5MDAyNDUxWhcNMjUxMDI2MDAyNDUxWjAYMRYwFAYD VQQDEw02OGY0MmZkMy0xYjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4SkuMf4XRaTwjlxS25WXc2X+v6/oMnVMR+uytk+NKKkSDyGygfpAXF7Ez1zz GJHdYejvxEZmraNZAiWcsQQ5stnCoGyNlzqHQ+dheG9WT2Xq4fN3fDl+clwzuQ6C xok5EsGAp8wRRlqkhgZW/jrWuGJS7pIwz/cGlE42t22hSQ+A2B1QgSsWjysEDJ9Z WDyspG+t2TAnUMFfwqpSGFJzlOziMEQKA4b8uwYwkfXkolFjat/Hze2Q+gVG42S5 CPyVXIK9mrbsqnzBv01Zbz5dGSO7g3reD7HN4K6c9fxOh5hhgrf+LmKxfpy1Lz7F cg3ltczQfS0rmzcXm77SXIfGNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2pP2zi 8PlzxnJdTiHcjvlCRfLjMB8GA1UdIwQYMBaAFNpulBzb/gGq7gkbP5VZXW1AGDFt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkVCRC8zMTIwMDY1RUJD NUExMUVCOEUxRDkyNThDNEY5QUUwMi8ybTZVSE52LUFhcnVDUnNfbFZsZGJVQVlN VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJtNlVITnYtQWFydUNSc19sVmxkYlVBWU1XMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkVCRC8zMTIwMDY1RUJDNUExMUVCOEUxRDkyNThDNEY5QUUwMi8ybTZVSE52LUFh cnVDUnNfbFZsZGJVQVlNVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9MgPHhW8t3ZbHSj5IUJqN4fs+2PYvAUYGyH2QWkzIsv1LQvEMxSdf 9gLnwFQI2MwQBjCvYkaUw4HsKLIFhUNy+lzAwMSaxc8R5j7MpESBKBf5VpfbuSZP 6Nu9D8wG9eziYIMqnVvSZcZ5V1vnVeuqFk9MUJaDoAhLhXGBUbAk3PB2FI8TR7fV s35Plz226PQHSW9NgXQ0MaooA7nw64EQD9bPv/UmmG9cjdgAUgAYMGur1ROZJF9D 5fm/wYW4lEjsUsPJgSVd2ZWuxuaQLDunPUhe7TBWSeBBlpRwR6AxlR5HmviiMHxL LDzLIGgtYQbW/0gAgDbxmWoKTSit4Npx -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:16 2025 by rpki-client